CVE-2005-0249
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote...
CVE-2005-0249 is a high vulnerability (CVSS 7.5) in Symantec Antivirus Scan Engine, published February 8, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.8%, the 97th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 18.8%EPSS, 97th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
Exploit likelihood
Affected products
- symantec antivirus scan engine
- symantec brightmail antispam
- symantec client security
- symantec gateway security
- symantec mail security
- symantec norton antivirus
- symantec norton internet security
- symantec norton system works
- symantec sav filter domino nt ports
- symantec sav filter for domino nt
- symantec web security
What each source reports
NVD Score used
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
- Record
CVE-2005-0249- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
- Record
CVE-2005-0249- Updated
- 2026-11-02
EUVDEUVD-2005-0250No score
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
- Record
EUVD-2005-0250- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4xqg-rgj7-cf6vNo score
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote...
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
- Record
GHSA-4xqg-rgj7-cf6v- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.